github-actions
Use when adding CI/CD, creating workflows, auditing GitHub Actions, or fixing action pinning.
What this skill does for you
Use when adding CI/CD, creating workflows, auditing GitHub Actions, or fixing action pinning. Creates and audits workflows for SHA pinning and permissions.
Quoted from the skill description in the pinned sourceWho made it
Use it with Edge
Set up Edge for me: read getedge.cc/SKILL.md and follow it. Then use Edge to load the github-actions skill from tartinerlabs/skills.
Paste it into Claude, ChatGPT, Codex or Cursor.
Or read the skill source first.
Security evidence
| Scanner | Date | Result | Findings |
|---|---|---|---|
| Edge static checks | 2026-09-27 | Pass | 0 |
| Cisco skill-scanner | 2026-09-27 | Pass | 0 |
| Semgrep Edge rules | 2026-09-27 | Pass | 0 |
Static scans check the code, not how well the skill works.
Scanner scope, raw findings and mirrored provider records
Edge static checks (Edge-run): edge-static/1.0.1. Scope: Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence. Revision: 39b6890b0402b6e9bfd532951ce551c0bcf2dafc. Raw findings: . Counted findings: .
Cisco skill-scanner (Edge-run): cisco-skill-scanner/2.1.0. Scope: Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis. Revision: 39b6890b0402b6e9bfd532951ce551c0bcf2dafc. Raw findings: 2. Counted findings: .
Semgrep Edge rules (Edge-run): semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1. Scope: Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded. Revision: 39b6890b0402b6e9bfd532951ce551c0bcf2dafc. Raw findings: . Counted findings: .
Source and licence
- Repository
- https://github.com/tartinerlabs/skills
- Pinned skill file
- View source at revision
- Revision
- 39b6890b0402b6e9bfd532951ce551c0bcf2dafc
- Package hash
- sha256:10034ec0bf0665e74e5a8392ad8acb3ee06f65f0d803661b1ac388a950c5e55b
- Licence
- MIT